$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9aa8906c-aea3-3e12-9d44-87446b357c28.roa File: 9aa8906c-aea3-3e12-9d44-87446b357c28.roa (raw, json) Hash identifier: rKTIV78y2WmmAZSgCxhj93DbniH5x96NNGdvW4S8ni4= Subject key identifier: 03:BE:A5:F4:50:15:D9:F2:C5:99:98:CE:78:83:AA:36:36:6E:C1:61 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D89E6EED248D068D452C69E40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9aa8906c-aea3-3e12-9d44-87446b357c28.roa Signing time: Fri 17 Apr 2026 17:32:37 +0000 ROA not before: Fri 17 Apr 2026 17:32:37 +0000 ROA not after: Thu 16 Jul 2026 17:32:37 +0000 asID: 274894 IP address blocks: 38.236.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:e6:ee:d2:48:d0:68:d4:52:c6:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 17 17:32:37 2026 GMT Not After : Jul 16 17:32:37 2026 GMT Subject: CN=cddc4eaf-0c71-418e-94ff-59443f9d6152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:44:e9:7b:34:af:44:12:1a:ea:81:89:70:e2: 3f:d9:35:8f:61:50:8a:15:d7:cd:3d:47:5b:e7:06: e5:ed:03:b5:f0:66:0a:ca:4d:ee:7a:f0:79:ca:71: 3c:c9:fd:52:33:ee:9c:5d:9b:1a:8c:73:4d:c5:b7: 0d:88:e8:c8:7f:8d:c8:14:bb:82:39:3d:43:09:27: b6:0d:b2:81:16:22:b6:61:a4:97:34:af:2a:ad:74: 8c:fa:aa:75:6f:7e:db:87:04:2c:92:4a:49:1d:c8: 5d:cb:be:3b:f2:a6:ab:07:47:2a:67:9b:a8:6e:09: 57:88:57:73:80:5f:58:92:31:35:f4:af:bd:ce:9c: d5:2c:6e:69:ce:16:47:dd:dd:0b:6c:92:2b:55:7c: c5:58:4f:a6:c7:ac:00:f4:b3:9a:3c:c6:2e:99:8f: fc:9f:42:23:68:a8:61:6a:a6:09:f5:e7:af:44:be: 17:b5:9e:09:a4:83:d3:f8:aa:06:a7:46:e5:e3:19: e9:5e:ea:10:de:7f:64:46:82:33:89:d6:0b:d2:c3: 28:6a:eb:07:44:37:df:d7:20:c1:44:55:92:d1:d6: c9:5b:0c:8e:ff:2a:ed:3a:42:87:db:7f:0f:28:76: 49:f7:60:3c:a9:ce:53:ba:bf:d5:cc:1d:ac:8a:57: 24:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BE:A5:F4:50:15:D9:F2:C5:99:98:CE:78:83:AA:36:36:6E:C1:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9aa8906c-aea3-3e12-9d44-87446b357c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:48:5d:2f:4e:06:52:48:35:61:8c:9f:42:57:71:d7:04:17: 10:29:46:78:8a:de:e0:cc:14:7f:df:80:27:86:87:10:ac:b3: 2e:5f:64:c0:5b:a6:49:9c:d3:02:f6:5b:9e:b1:3d:d6:0d:c9: d9:42:44:29:c2:41:d6:37:10:12:36:e4:80:80:5a:5b:2c:d9: 10:ed:48:af:c3:75:bb:eb:9d:d5:c3:ad:29:30:5e:cc:9e:7d: 55:db:d4:da:b0:92:4e:ed:18:fb:8f:b3:28:6b:6c:42:f6:ad: 0c:12:18:b9:16:43:d9:79:8c:b5:68:25:91:4b:a1:aa:3a:3d: b4:9f:02:6b:5e:89:36:71:4b:2d:85:9a:1b:0a:ca:7c:17:9b: 37:80:df:ab:4e:e0:a8:66:9d:c0:bd:8f:30:e3:8d:3c:35:bd: 48:e0:2d:e3:28:f5:33:a9:50:96:6a:3c:5c:24:9e:23:ac:47: 65:05:69:f6:0a:75:2b:4d:c8:e8:62:fe:72:fd:16:63:9b:1d: bc:36:ae:ff:f6:0d:2d:ba:a3:1b:ea:0e:9d:97:29:15:40:dc: 25:e2:a6:e5:17:a5:f3:49:b1:87:cf:ff:01:f6:e9:3f:74:f3: c3:64:16:bf:a7:34:60:e9:7d:d6:b2:71:40:b2:bf:ff:08:ce: ec:25:7a:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2J5u7SSNBo1FLGnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQxNzE3MzIzN1oXDTI2MDcxNjE3MzIzN1owLzEtMCsGA1UEAxMk Y2RkYzRlYWYtMGM3MS00MThlLTk0ZmYtNTk0NDNmOWQ2MTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgETpezSvRBIa6oGJcOI/2TWPYVCKFdfNPUdb 5wbl7QO18GYKyk3uevB5ynE8yf1SM+6cXZsajHNNxbcNiOjIf43IFLuCOT1DCSe2 DbKBFiK2YaSXNK8qrXSM+qp1b37bhwQskkpJHchdy7478qarB0cqZ5uobglXiFdz gF9YkjE19K+9zpzVLG5pzhZH3d0LbJIrVXzFWE+mx6wA9LOaPMYumY/8n0IjaKhh aqYJ9eevRL4XtZ4JpIPT+KoGp0bl4xnpXuoQ3n9kRoIzidYL0sMoausHRDff1yDB RFWS0dbJWwyO/yrtOkKH238PKHZJ92A8qc5Tur/VzB2silckhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAO+pfRQFdnyxZmYzniDqjY2bsFhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWFhODkwNmMtYWVhMy0z ZTEyLTlkNDQtODc0NDZiMzU3YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuxrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRIXS9OBlJINWGMn0JXcdcEFxApRniK3uDMFH/fgCeGhxCssy5fZMBb pkmc0wL2W56xPdYNydlCRCnCQdY3EBI25ICAWlss2RDtSK/DdbvrndXDrSkwXsye fVXb1Nqwkk7tGPuPsyhrbEL2rQwSGLkWQ9l5jLVoJZFLoao6PbSfAmteiTZxSy2F mhsKynwXmzeA36tO4KhmncC9jzDjjTw1vUjgLeMo9TOpUJZqPFwkniOsR2UFafYK dStNyOhi/nL9FmObHbw2rv/2DS26oxvqDp2XKRVA3CXipuUXpfNJsYfP/wH26T90 88NkFr+nNGDpfdaycUCyv/8IzuwlejY= -----END CERTIFICATE-----Generated at Tue Apr 28 21:11:59 2026 by rpki-client